Privacy policy
How we look after the small amount of personal information you give us.
Last updated · May 2026
In short
- We are Arnold Relief in Need, a small UK registered charity (220057). We are the data controller of any personal information you share with us.
- We collect only what we need — your name and email to reply to you; a donation amount and card reference if you give us money; a postcode if you are referring a household, so we can check the parish boundary.
- We rely on legitimate interest for general enquiries and on consent for our quarterly newsletter.
- We do not sell or rent your data. We share it only with the small list of named processors below (mainly Mailchimp for the newsletter and a payment processor for donations) or where we must by law.
- You have full UK GDPR rights — access, rectification, erasure, restriction, portability and objection. Write to us and we will reply within thirty days.
- You can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113 if we have got something wrong.
1. Who we are
Arnold Relief in Need is a UK registered charity, number 220057, with its registered office at 73 Arnot Hill Road, Arnold, Nottingham, NG5 6LN. We are the data controller for the personal data described in this notice. Our honorary secretary acts as the trust's data-protection point of contact; please write to [email protected] for any data-protection enquiry.
2. What personal data we collect
We collect only the information we need to do the small piece of work the trust exists to do. Specifically:
- Your name and an email address (or postal address) when you contact us, volunteer with us, or refer a household to us.
- A telephone number if you choose to give us one.
- A donation amount, a card-payment reference (not your card number, which is handled by our payment processor), and a postal address if you wish us to send a paper receipt.
- A postcode when you make a household referral, so that we can check the parish boundary.
- Anonymous analytics about how you use this website — pages visited, broad geographical region, device type. We never combine analytics with the personal data above.
For households we visit through the Sunday Doors programme, we hold a single-sheet log per visit. The household sees this log and may ask for any of it to be removed at any time.
3. Why we collect it and our lawful basis
Our lawful bases under UK GDPR are:
- Legitimate interests — to reply to enquiries, to manage volunteer rotas, to administer the small grants programmes, and to keep the trustee minute book.
- Consent — for the quarterly newsletter and for any anonymised story we print on the site.
- Legal obligation — to keep statutory financial records and to file an annual return with the Charity Commission.
- Vital interests — in the rare case of a safeguarding escalation.
4. Who we share your data with
We do not sell your data. The small number of named processors who handle data on our behalf are:
- Mailchimp (Intuit Inc.) — sends our quarterly newsletter under a UK GDPR data-processing agreement.
- Stripe (Stripe Payments Europe Ltd) — processes card donations. We never see your card number.
- Charity Commission for England and Wales — receives our annual return and any required regulatory filing.
- Royal Mail — delivers any letter we post to you.
- Cloudflare Pages — hosts this static website. Cloudflare may receive standard server logs (IP, request path, user agent). No form data is stored on our servers.
5. How long we keep your data
- Donor records — 7 years (in line with HMRC and Charity Commission expectations).
- General enquiries — 24 months from the last contact.
- Volunteer records — for the duration of your role, plus 24 months after you finish.
- Sunday Doors visit logs — kept for the duration of the partnership and destroyed within twelve months of the partnership ending, unless the household asks for them to be returned.
- Website analytics — 14 months.
6. Your rights under UK GDPR
You have the right to:
- Be informed about what we hold (this notice).
- Access a copy of your data.
- Have inaccurate data corrected.
- Have your data erased, where applicable.
- Restrict or object to our processing.
- Have your data ported to another provider, where applicable.
To exercise any of these rights, write to [email protected]. We will reply within thirty calendar days, free of charge in the vast majority of cases.
7. Cookies and analytics
We use a small number of essential cookies and a single first-party analytics measure. The full breakdown sits in our cookie policy.
8. Children's data
We do not market to people under the age of 13 and we do not knowingly collect personal data from children. First Bell school-uniform grants are administered through the schools' bursary routes — the trust does not see individual children's names, only the school, the year group, and the bursary account. The trust's full safeguarding policy is available on our resources page.
9. Changes to this policy
We review this policy each spring at the trustees' quarterly meeting. Any material change will be flagged with a new 'last updated' date at the top of this page and, where relevant, in the next quarterly newsletter.
10. How to complain
If you are unhappy with the way we have handled your personal information, please write to the chair of trustees at 73 Arnot Hill Road, Arnold, Nottingham, NG5 6LN, who will respond in full within twenty working days. If you remain unsatisfied you have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.